Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/060B933436DF11ECA594736AD8A014CE.roa
File:                     060B933436DF11ECA594736AD8A014CE.roa (raw, json)
Hash identifier:          qcAQesGBMkslJc/2PNvI53D0HLlsN1qNhAfYgh+RObc=
Subject key identifier:   FD:C4:7D:99:14:A0:34:E0:6A:2F:78:FD:1D:25:6D:80:BA:3D:E7:E4
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0B65
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/060B933436DF11ECA594736AD8A014CE.roa
Signing time:             Wed 27 Oct 2021 04:33:25 +0000
ROA not before:           Wed 27 Oct 2021 04:33:21 +0000
ROA not after:            Thu 27 Oct 2022 04:33:21 +0000
asID:                     58895
IP address blocks:        45.206.102.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2917 (0xb65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 27 04:33:21 2021 GMT
            Not After : Oct 27 04:33:21 2022 GMT
        Subject: CN=6178d695-7be1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:37:2e:67:3c:3d:48:08:c1:f9:63:98:38:8f:
                    0a:72:1d:53:94:d2:45:dd:da:0e:b0:a7:91:eb:bd:
                    df:6a:33:83:6a:59:49:9e:d5:e9:31:bc:72:a3:ca:
                    ab:85:28:e8:e5:c3:21:b5:17:e7:be:0d:9c:d4:6b:
                    17:a2:7a:52:48:20:a0:d4:82:a5:0c:0a:09:40:4a:
                    d3:90:60:a9:ec:30:85:06:eb:a3:bd:54:23:18:c2:
                    7c:3f:2c:e6:45:4e:47:54:9e:21:6c:c3:60:07:0f:
                    23:04:25:f6:48:ba:f7:4a:1c:36:a3:cd:ac:34:20:
                    ae:98:c7:49:53:8f:26:fe:b3:17:74:18:5c:80:24:
                    94:8a:9b:4e:63:f3:df:7e:39:38:fc:de:60:4a:b2:
                    50:d4:e4:0f:cb:6d:34:dc:cb:6f:01:90:32:33:a4:
                    b9:2a:c6:29:9f:eb:67:42:98:22:aa:60:ad:7a:91:
                    7d:23:85:62:fc:5e:94:9c:ff:1e:82:41:83:f0:e4:
                    06:8d:51:95:9d:cf:14:62:b2:57:8e:4c:f7:44:69:
                    e3:dd:cc:93:33:63:61:de:14:c3:75:bb:67:17:4a:
                    31:ed:6a:f9:96:8f:74:a3:25:41:f7:7d:3e:ec:06:
                    23:28:94:50:66:e9:40:d4:79:b7:28:c1:3b:c1:fc:
                    8c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:C4:7D:99:14:A0:34:E0:6A:2F:78:FD:1D:25:6D:80:BA:3D:E7:E4
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/060B933436DF11ECA594736AD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.206.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:10:03:a2:53:3b:57:7f:70:bf:2a:c7:54:fb:1a:a8:ac:1f:
         ec:f2:15:dd:b7:e6:13:52:7e:95:9e:25:b2:d0:0d:f7:87:e8:
         52:85:fe:45:54:f2:d6:01:50:b0:6d:52:a6:9a:89:78:bd:20:
         8c:05:14:7b:54:df:a6:17:22:28:2d:ac:f0:5f:f7:71:23:9e:
         a8:82:23:49:aa:19:68:32:90:f8:42:01:f3:f5:6c:8f:0e:92:
         e1:36:af:03:c5:dd:62:ad:60:25:6a:24:74:b7:16:ca:27:c3:
         09:9a:19:d0:88:f8:a5:7b:c9:f0:49:92:c4:8d:4f:b3:5e:4a:
         83:76:ad:7f:01:9d:26:2c:ab:d1:50:68:4e:dc:df:dc:e3:12:
         08:c0:39:ee:d7:f1:c7:ef:10:3f:ee:46:79:66:37:d1:27:bf:
         3f:a9:bf:7e:43:2d:f6:1a:81:20:a9:c2:c1:43:72:c1:df:3b:
         85:3e:6d:cb:48:60:9f:7c:8e:86:bf:d3:4d:2e:db:f6:51:e6:
         7c:9a:4d:6c:6a:ea:ff:84:1b:bc:08:3b:5d:4f:7b:d5:f9:42:
         45:cb:69:9b:ab:f2:b0:f2:4f:f6:2e:95:22:ec:ec:4b:2f:7e:
         14:c5:7a:eb:32:c1:49:2a:0b:c3:dd:0d:14:cc:61:43:4f:37:
         0e:73:29:b1
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICC2UwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMTEwMjcwNDMzMjFaFw0yMjEwMjcwNDMzMjFaMBgxFjAU
BgNVBAMMDTYxNzhkNjk1LTdiZTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCWNy5nPD1ICMH5Y5g4jwpyHVOU0kXd2g6wp5Hrvd9qM4NqWUme1ekxvHKj
yquFKOjlwyG1F+e+DZzUaxeielJIIKDUgqUMCglAStOQYKnsMIUG66O9VCMYwnw/
LOZFTkdUniFsw2AHDyMEJfZIuvdKHDajzaw0IK6Yx0lTjyb+sxd0GFyAJJSKm05j
899+OTj83mBKslDU5A/LbTTcy28BkDIzpLkqximf62dCmCKqYK16kX0jhWL8XpSc
/x6CQYPw5AaNUZWdzxRisleOTPdEaePdzJMzY2HeFMN1u2cXSjHtavmWj3SjJUH3
fT7sBiMolFBm6UDUebcowTvB/IzJAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU/cR9
mRSgNOBqL3j9HSVtgLo95+QwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzA2MEI5MzM0MzZERjExRUNBNTk0NzM2QUQ4QTAxNENFLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtzmYwDQYJKoZIhvcNAQELBQAD
ggEBAIQQA6JTO1d/cL8qx1T7GqisH+zyFd235hNSfpWeJbLQDfeH6FKF/kVU8tYB
ULBtUqaaiXi9IIwFFHtU36YXIigtrPBf93EjnqiCI0mqGWgykPhCAfP1bI8OkuE2
rwPF3WKtYCVqJHS3FsonwwmaGdCI+KV7yfBJksSNT7NeSoN2rX8BnSYsq9FQaE7c
39zjEgjAOe7X8cfvED/uRnlmN9Envz+pv35DLfYagSCpwsFDcsHfO4U+bctIYJ98
joa/000u2/ZR5nyaTWxq6v+EG7wIO11Pe9X5QkXLaZur8rDyT/YulSLs7EsvfhTF
eusywUkqC8PdDRTMYUNPNw5zKbE=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:14 2023 by rpki-client on console-ams.rpki-client.org